🌏 Somo

A prettier alternative to netstat or ss for socket monitoring.

⬇️ Installation:

1. Install cargo:

2. Install the somo crate:

cargo install somo

🏃‍♀️ Running somo:

To run somo just type: somo It can often be beneficial to run it in sudo mode since many PIDs will remain hidden otherwise. To do so, you can run it using the full path: ```bash

you can find out the path by running: "where somo"

sudo /path/to/somo

or run it like this:

sudo $(where somo) `Problems with this: it's unconvenient and ENV variables can't be accessed! Better solution: Add it to the$PATH`` variable (like this).

⚙️ Features:

1. Pretty and easily readable table:

somo-example

2. Filtering:

You can filter by remote port, local port, IP, protocol, client program, PID and connection status. Check the flag descriptions below.

3. Process killing:

With the -k flag you can choose to kill a process after inspecting the connections using an interactive selection option. kill-example

4. Checking for malicious IPs using AbuseIPDB.com:

To automatically check if any of the remote IPs you are connected to are malicious you can specify an API key for the AbuseIPDB API as an environment variable: bash export ABUSEIPDB_API_KEY={your-api-key} # not session persistent Adding the -c flag will then check for malicious IPs and notify you in the table: check-example

🚩 Flags: